Adam Levin, CISO of Network Doctor discusses the recent CrowdStrike incident and its impact on businesses, emphasizing the need for robust and adaptable IT support strategies for New Jersey CEOs. It highlights the importance of a multi-layered approach to cybersecurity, proactive planning, and strategic vendor management. The article also outlines how Network Doctor’s resilient IT support model successfully mitigates risks and ensures business continuity.

Content Highlights:

• Analysis of the CrowdStrike incident and its implications.
• Key takeaways for CEOs on strengthening IT support.
• Overview of Network Doctor’s approach to resilient IT support.
• Actionable steps for building a resilient IT strategy.

• The Trigger:  A routine update to CrowdStrike’s Falcon security software introduced a critical bug, causing endless reboot cycles on Windows systems.
• Timing is Everything: Released just before a weekend, the bug’s impact was magnified as businesses returned to find their systems inoperable.
• Scale of Impact: The global rollout affected organizations across various industries, including critical infrastructure like hospitals and emergency services.
• Recovery Challenges: Manual intervention was required for each affected device, significantly slowing the recovery process and prolonging outages.
•  Ripple Effects: The incident disrupted operations far beyond IT departments, affecting core business functions and customer services.

• Diversified Solutions: We don’t put all our eggs in one basket. By employing a multi-platform approach, we significantly reduce dependency on any single vendor. This strategy proved crucial during the CrowdStrike incident, as our clients remained largely unaffected.
• Emphasis on Human Expertise: While we leverage cutting-edge automation, we never underestimate the value of human expertise. The CrowdStrike incident demonstrated why having “hands on the ground” is essential. Our team’s ability to provide direct, manual intervention when needed is a cornerstone of our service.
• Defense in Depth: We implement multiple layers of security controls for our clients. This approach ensures that a single point of failure doesn’t compromise the entire system.
• Proactive Planning: Our clients weathered the CrowdStrike storm better than most because we anticipate and prepare for potential issues before they arise. It’s not about if something will happen, but when, and being ready when it does.
• Strategic Vendor Management: We’re meticulous about understanding the access and permissions granted to technology partners. This careful approach helps us mitigate risks associated with third-party solutions.
• Balanced Technology Approach: While we’re always at the forefront of technological advancements, we maintain a balanced view. We recognize that the most effective IT support combines advanced software solutions with skilled human intervention.
• Robust Incident Response: The CrowdStrike incident underscores the importance of being prepared for the unexpected. Our incident response protocols are regularly updated and tested to ensure we’re ready for any scenario.

• Diversify Your Security Solutions: Don’t rely solely on a single provider, no matter how reputable. Implement a multi-layered approach combining solutions from different vendors to mitigate risks.
• Invest in Local IT Expertise: Partner with local IT support providers, like Network Doctor, who can offer 24/7 hands-on assistance when automated systems falter. On-the-ground presence can be invaluable during critical incidents.
• Implement Robust Testing Protocols: Establish rigorous testing processes for all updates before full deployment. Consider setting up isolated network environments for thorough testing.
• Develop a Comprehensive Incident Response Plan: Create and regularly update a detailed plan outlining steps for various scenarios, from minor glitches to major outages.
• Prioritize Employee Training: Regular training on cybersecurity best practices and incident response can significantly enhance your organization’s overall resilience.
• Embrace Cloud Solutions Wisely: While cloud-based systems often offer better redundancy, ensure you understand the shared responsibility model and have appropriate backup strategies.
• Conduct Regular System Audits: Periodic reviews of your IT infrastructure can help identify potential vulnerabilities before they become problems.
• Foster a Culture of Cybersecurity Awareness: Promote a culture where cybersecurity is everyone’s responsibility, from the C-suite to the front desk.